Kiedy następuje zalogowanie?

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

	@Autowired
	DataSourceConfig dataSource;
	
	@Override
	protected void configure(HttpSecurity http) throws Exception {
	  
	  http.csrf().disable()
      .authorizeRequests()
          .antMatchers("/user/register/**").permitAll()
          .antMatchers("/note/**").permitAll()
          .antMatchers("/").permitAll()
          .anyRequest().authenticated()
          .and()
      .formLogin()
          .loginPage("/user/login")
          .permitAll()
          .and()
      .headers()
          .frameOptions().disable()
          .and()
      .logout()
          .permitAll();
		}
   

   @Autowired
   private CustomUserDetailsService userDetailsService;

   @Bean
   public DaoAuthenticationProvider authProvider() {
       DaoAuthenticationProvider authProvider = new DaoAuthenticationProvider();
       authProvider.setUserDetailsService(userDetailsService);
       authProvider.setPasswordEncoder(passwordEncoder());
       return authProvider;
   }

   @Override
   public void configure(AuthenticationManagerBuilder auth) throws Exception {
       auth.authenticationProvider(authProvider());
   }

   @Bean
   public PasswordEncoder passwordEncoder() {
       return new BCryptPasswordEncoder();
   }

}

@RequestMapping(value="/login", method=RequestMethod.GET)
	public String showLoginForm(
			@RequestParam(value = "error", required = false) String error,
			@RequestParam(value = "logout", required = false) String logout, @ModelAttribute("user") User user, BindingResult result) {
		
		if (error != null) {
			LOG.info("INVALID PASSWORD");
			ObjectError errorObj = new ObjectError("general", messageSource.getMessage("user.login.credentials.bad", null, LocaleContextHolder.getLocale()));
			result.addError(errorObj);
		}

		if (logout != null) {
			LOG.error("LOUT");
		}
		return "loginForm";
	}

@Service
public class CustomUserDetailsService implements UserDetailsService {

	@Autowired
	UserDao userDao;
	
	@Override
	public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
		
		User user = userDao.getUserByUsername(username);
		if (user == null) {
			throw new UsernameNotFoundException("No such user: " + username);
		} else if (user.getRoles().isEmpty()) {
			throw new UsernameNotFoundException("User " + username + " has no authorities");
		}
		
		return new UserDetailsHelper(user);		
	}

}